Threats affecting pkg:maven/com.oracle/fusionmiddleware-oracle-identity-manager-connector

A critical vulnerability exists in the Oracle Identity Manager Connector component of Oracle Fusion Middleware, affecting versions 12.2.1.4.0 and 14.1.2.1.0. This vulnerability allows an unauthenticated attacker with access to the physical communication segment of the hardware running the connector to compromise it. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible by the Oracle Identity Manager Connector. The vulnerability has a CVSS 3.1 base score of 9.3, indicating high confidentiality and integrity impacts. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.